Which of the following is NOT considered an element of information security?

Which of the following is NOT considered an element of information security?

• A. Integrity
• B. Confidentiality
• C. Encryption
• D. Authenticity

Answer: (C)

Encryption is a method or technique used to secure data, but it is not an element of information security itself. Information security is fundamentally based on the principles of confidentiality, integrity, and authenticity—often referred to as the CIA triad. These principles define the goals and objectives of securing information: - Confidentiality ensures that information is accessible only to those authorized to have access. - Integrity refers to the accuracy and trustworthiness of data, ensuring that it cannot be altered or destroyed without proper authorization. - Authenticity ensures that the information is genuine and comes from a verified source, preventing impersonation or forgery. While encryption plays a crucial role in achieving confidentiality and protecting the integrity of data, it is a technical implementation rather than a core principle of information security. Therefore, it is appropriate to identify encryption as not being one of the fundamental elements characterizing the field of information security.

Encryption is a method or technique used to secure data, but it is not an element of information security itself. Information security is fundamentally based on the principles of confidentiality, integrity, and authenticity—often referred to as the CIA triad. These principles define the goals and objectives of securing information:

• Confidentiality ensures that information is accessible only to those authorized to have access.

• Integrity refers to the accuracy and trustworthiness of data, ensuring that it cannot be altered or destroyed without proper authorization.

• Authenticity ensures that the information is genuine and comes from a verified source, preventing impersonation or forgery.

While encryption plays a crucial role in achieving confidentiality and protecting the integrity of data, it is a technical implementation rather than a core principle of information security. Therefore, it is appropriate to identify encryption as not being one of the fundamental elements characterizing the field of information security.